This repository was archived by the owner on Apr 21, 2020. It is now read-only.

[Snyk] Upgrade gulp-connect from 5.5.0 to 5.7.0 #6

Open

snyk-bot wants to merge 1 commit into master from snyk-upgrade-be9f0bf8074bcb9779cf072462acf19e

snyk-bot commented Aug 16, 2019

Snyk have raised this PR to upgrade gulp-connect from 5.5.0 to 5.7.0.

The recommended version is 2 minor versions ahead of your current version.
The recommended version was released 8 months ago, on 2018-12-06.

The recommended version fixes:

Severity	Title	Issue ID
	Regular Expression Denial of Service (ReDoS)	npm:fresh:20170908
	Prototype Override Protection Bypass	npm:qs:20170213
	Prototype Override Protection Bypass	npm:qs:20170213
	Regular Expression Denial of Service (ReDoS)	npm:debug:20170905
	Regular Expression Denial of Service (ReDoS)	npm:mime:20170907
	Regular Expression Denial of Service (ReDoS)	npm:ms:20170412

Release notes

5.7.0 - 2018-12-06 No content.
5.6.1 - 2018-08-28 No content.
5.5.0 - 2018-02-22 No content.

from gulp-connect GitHub Release Notes

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


          chore: upgrade gulp-connect from 5.5.0 to 5.7.0

266117b

Snyk have raised this PR to upgrade gulp-connect from 5.5.0 to 5.7.0.

See this package in NPM:
https://www.npmjs.com/package/gulp-connect

See this project in Snyk:
https://app.snyk.io/org/mutmatt/project/2e69e388-2c84-4967-8782-1a4ff9c5680f?utm_source=github&utm_medium=upgrade-pr

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet